Lucene search
+L

419 matches found

Wired Threat Level
Wired Threat Level
added 2022/05/22 11:0 a.m.21 views

How to Limit Who Can Contact You on Facebook

You don't want just anyone in your inbox. Here's how to take control...

2AI score
SaveExploits0
CNVD
CNVD
added 2022/04/24 12:0 a.m.40 views

Sourcecodester Baby Care System SQL注入漏洞(CNVD-2022-35530)

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/inbox.php & action=read & msgid= where the msgid parameter lacks validation for external...

9.8CVSS3.7AI score0.0122EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/24 12:0 a.m.52 views

Sourcecodester Baby Care System SQL注入漏洞(CNVD-2022-35531)

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/inbox.php & action=delete & msgid= where the msgid parameter lacks validation for external...

9.8CVSS3.4AI score0.0122EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/21 8:15 p.m.6 views

CVE-2022-28427

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=...

9.8CVSS5.8AI score0.0122EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/04/21 8:15 p.m.5 views

CVE-2022-28427

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=...

9.8CVSS5.9AI score0.0122EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/04/21 8:15 p.m.4 views

CVE-2022-28429

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=...

9.8CVSS5.9AI score0.0122EPSS
SaveExploits1References2
OSV
OSV
added 2022/04/21 8:15 p.m.6 views

CVE-2022-28429

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=...

9.8CVSS5.8AI score0.0122EPSS
SaveExploits1References1
NVD
NVD
added 2022/04/21 8:15 p.m.22 views

CVE-2022-28429

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=...

9.8CVSS0.0122EPSS
SaveExploits1References1
Prion
Prion
added 2022/04/21 8:15 p.m.14 views

Sql injection

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=...

7.5CVSS9.7AI score0.0122EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.12 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/inbox.php & action=delete & msgid= where the msgid parameter lacks validation for external...

9.8CVSS6.1AI score0.0122EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.11 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/inbox.php & action=read & msgid= where the msgid parameter lacks validation for external...

9.8CVSS6AI score0.0122EPSS
SaveExploits1References2
Huntr
Huntr
added 2022/02/02 4:45 a.m.8 views

Improper Authorization in bytebase/bytebase

Description Hello bytebase team, there is an improper privilege management in bytebase source code. This allows a user to view another user inbox. Proof of Concept 1. Install bytebase, create new user user1and user2 2. Login as user1, go to this link /api/inbox?user=user-id and change user-id to ...

2.4AI score
SaveExploits0
OSV
OSV
added 2021/12/03 5:15 p.m.8 views

CVE-2021-29756

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery CSRF in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202167...

8.8CVSS5.7AI score0.00566EPSS
SaveExploits0References3
NVD
NVD
added 2021/12/03 5:15 p.m.25 views

CVE-2021-29756

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery CSRF in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202167...

8.8CVSS0.00566EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/12/03 5:0 p.m.28 views

CVE-2021-29756

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery CSRF in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202167...

4.3CVSS8.5AI score0.00566EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2021/10/27 12:0 a.m.29 views

Mahara <= 20.10 CSRF Vulnerability

Mahara is prone to a cross-site request forgery CSRF vulnerability that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a...

6.5CVSS6.8AI score0.01545EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2021/09/21 11:30 a.m.81 views

MailRipV2 - Improved SMTP Checker / SMTP Cracker With Proxy-Support, Inbox Test And Many More Features

Your SMTP checker / SMTP cracker for mailpass combolists including features like: proxy-support SOCKS4 / SOCKS5 with automatic proxy-scraper and checker, e-mail delivery / inbox check and DNS lookup for unknown SMTP-hosts. Made for easy usage and always working! Overview Legal Notices You are ONL...

7.4AI score
SaveExploits0References1
CNVD
CNVD
added 2021/09/15 12:0 a.m.53 views

Siemens Teamcenter Access Control Error Vulnerability

An access control error vulnerability exists in Siemens Teamcenter, a product lifecycle management computer software application from Siemens, Germany. The vulnerability is due to a failure of the surrogate function on the application user profile to perform sufficient access control, which could...

7.1CVSS3.4AI score0.00585EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/14 11:15 a.m.7 views

CVE-2021-40354

A vulnerability has been identified in Teamcenter V12.4 All versions V12.4.0.8, Teamcenter V13.0 All versions V13.0.0.7, Teamcenter V13.1 All versions V13.1.0.5, Teamcenter V13.2 All versions 13.2.0.2. The "surrogate" functionality on the user profile of the application does not perform sufficien...

7.1CVSS7AI score0.00585EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/09/14 10:47 a.m.34 views

CVE-2021-40354

A vulnerability has been identified in Teamcenter V12.4 All versions V12.4.0.8, Teamcenter V13.0 All versions V13.0.0.7, Teamcenter V13.1 All versions V13.1.0.5, Teamcenter V13.2 All versions 13.2.0.2. The "surrogate" functionality on the user profile of the application does not perform sufficien...

7AI score0.00585EPSS
SaveExploits0References1
Rows per page
Query Builder